MEDIUM 6.9 NVD
CVE-2026-97858
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.
References
- https://eseecloud.app/
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-288-02.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02
This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-10-16 via NVD.
vulnfeed aggregates 16278 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.